One of the new exploits reportedly affects every device from version 1.0, which was released in 2008, and the other impacts devices running 5.0 and above. The attack — dubbed Stagefright 2.0 — is related to the processing of metadata within a MP3 or  MP4 video file.
Link: A single song could be used to exploit more than a billion Android phones